Qix is an open source maintainer account that was compromised by a phishing attack. This allowed attackers to infect 18 popular npm packages with malicious code. Together, these packages are ...
Aikido Security Ltd. today disclosed what is being described as the largest npm supply chain compromise to date, after ...
"Each published package becomes a new distribution vector: as soon as someone installs it, the worm executes, replicates, and ...
The credential stealer harvested username, password, and 2FA codes before sending them to a remote host. With full access, ...
The novel malware strain is being dubbed Shai-Hulud — after the name for the giant sandworms in Frank Herbert’s Dune novel ...
Halud, is compromising hundreds of NPM packages, spreading self-replicating malware, exfiltrating data, and turning private ...
According to ReversingLabs' 2025 Software Supply Chain Security Report, 14 of the 23 crypto-related malicious campaigns in ...
Threat actors injected malicious code into multiple popular NPM packages after their maintainers fell for a well-crafted ...
Visual Studio Code is a code editor that is completely free and open-source. It has been developed by Microsoft and is highly regarded by developers due to its lightweight, fast, and extensible design ...
Some results have been hidden because they may be inaccessible to you
Show inaccessible results
Feedback